Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier: OTfoCVPAKy8SisldXT1eYSibU9RtUQiA+c0ETPHa7PU=
Subject key identifier: 05:4E:BC:40:3E:FF:BE:7F:9E:9B:CE:E0:6B:02:4D:6E:4A:32:1F:89
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 019FA1BBCF16DC51B4B2A17E31CF11E3D92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 04:01:07 +0000
Manifest this update: Mon 27 Jul 2026 04:01:07 +0000
Manifest next update: Tue 28 Jul 2026 04:01:07 +0000
Files and hashes: 1: YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa (hash: yfGpXBMwfuCn+DMxXYn3DWhF4inc0qBH11Kt+d+QCNw=)
2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: A7Uy9+xhxFQd8gfGq/6FOpMrFpGaQ3KZpBrK3j9nhXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:cf:16:dc:51:b4:b2:a1:7e:31:cf:11:e3:d9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Jul 27 04:01:07 2026 GMT
Not After : Jul 28 04:01:07 2026 GMT
Subject: CN=054ebc403effbe7f9e9bcee06b024d6e4a321f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:62:db:86:60:c5:f5:1d:05:82:81:a6:8f:
8d:34:28:7b:61:06:2f:6b:9c:63:99:ca:3c:71:82:
2e:0b:be:df:c9:49:ca:d2:5d:a9:f8:c5:9f:49:5f:
12:c7:6a:7a:fb:3c:88:65:5c:ad:dd:a4:1d:02:d1:
f9:10:07:2e:36:14:9e:4c:b4:e9:e1:13:13:2c:92:
66:82:73:7c:25:eb:3b:1f:fa:b6:a2:43:92:cb:ff:
28:38:01:53:97:3d:a3:21:a7:bb:34:ab:1a:d4:66:
c3:4b:32:0f:e6:b8:04:4f:ca:62:ba:00:2f:9c:e2:
2d:44:a7:29:39:c6:26:ab:81:48:63:ba:52:3f:18:
17:e2:3a:f5:a5:b8:3a:f0:63:af:31:e4:3a:b1:ce:
66:e3:23:23:d1:a7:4d:db:58:c7:19:37:15:6f:ae:
6a:6e:06:21:d1:52:0b:3b:e3:66:fc:65:1e:dd:5a:
89:bc:d5:61:58:2b:71:82:23:5b:bd:3e:da:3a:4f:
dd:b7:7f:72:6f:d1:5f:40:6a:40:e5:03:86:e4:de:
29:93:0c:0c:e9:5f:e4:19:2d:58:30:4d:33:c2:2f:
4e:6c:08:0d:cb:98:72:43:6c:da:b3:b0:14:98:9f:
69:f3:d4:01:5d:d9:78:ec:2f:36:ed:51:0f:21:b8:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:BC:40:3E:FF:BE:7F:9E:9B:CE:E0:6B:02:4D:6E:4A:32:1F:89
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c6:3f:8c:9e:a3:b0:75:af:4e:9b:09:6c:16:f2:13:2b:28:
49:f1:8d:18:8a:3b:63:47:ac:81:20:2b:b2:88:7a:ca:85:3e:
b7:f4:0c:ef:15:71:26:67:83:e2:76:11:96:ea:c9:f4:d3:a2:
6d:d0:00:1b:94:92:b9:e6:d7:6d:24:18:69:2d:a5:27:6e:25:
6c:bd:77:de:aa:c6:86:5b:c4:45:e3:47:c2:3b:7a:96:59:59:
3c:3f:9e:31:c9:ba:ee:62:ca:d1:2a:b5:f2:0b:10:d1:fc:28:
d7:ee:8c:d3:81:47:a0:0c:eb:ef:f9:ca:8f:7e:67:1f:02:7b:
04:22:b3:79:79:c8:16:46:8d:d7:76:e3:2e:c8:6b:32:10:4e:
62:c7:fa:bb:56:08:2b:63:67:7b:61:7e:1e:cd:54:8c:af:3a:
11:23:ac:48:66:56:46:8f:6a:34:c0:b4:4d:46:2b:db:86:fa:
39:92:30:ea:51:e5:de:cb:f4:a5:23:80:37:d5:79:b4:71:37:
3a:a2:e2:00:d5:db:a6:5f:94:6d:44:8b:df:f7:b1:62:ae:2e:
7b:ee:35:f8:24:46:bd:63:05:fd:cf:67:52:a7:c9:8e:d7:a3:
c7:dc:d7:3e:ee:94:41:62:a2:3f:2d:6e:bb:34:fc:47:78:0a:
29:49:7d:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu88W3FG0sqF+Mc8R49kvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NDEwNjU0MGYzMGE5ZGNkZjhlZjliZTcyZmZlZjhiZDhh
NzJlNWMwHhcNMjYwNzI3MDQwMTA3WhcNMjYwNzI4MDQwMTA3WjAzMTEwLwYDVQQD
EygwNTRlYmM0MDNlZmZiZTdmOWU5YmNlZTA2YjAyNGQ2ZTRhMzIxZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIZi24ZgxfUdBYKBpo+NNCh7YQYv
a5xjmco8cYIuC77fyUnK0l2p+MWfSV8Sx2p6+zyIZVyt3aQdAtH5EAcuNhSeTLTp
4RMTLJJmgnN8Jes7H/q2okOSy/8oOAFTlz2jIae7NKsa1GbDSzIP5rgET8piugAv
nOItRKcpOcYmq4FIY7pSPxgX4jr1pbg68GOvMeQ6sc5m4yMj0adN21jHGTcVb65q
bgYh0VILO+Nm/GUe3VqJvNVhWCtxgiNbvT7aOk/dt39yb9FfQGpA5QOG5N4pkwwM
6V/kGS1YME0zwi9ObAgNy5hyQ2zas7AUmJ9p89QBXdl47C827VEPIbj67wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVOvEA+/75/npvO4GsCTW5KMh+JMB8GA1UdIwQY
MBaAFIZBBlQPMKnc3475vnL/74vYpy5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTct
M2IzMThlNDcyNzZkLzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTctM2IzMThlNDcyNzZk
LzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcY/jJ6j
sHWvTpsJbBbyEysoSfGNGIo7Y0esgSArsoh6yoU+t/QM7xVxJmeD4nYRlurJ9NOi
bdAAG5SSuebXbSQYaS2lJ24lbL133qrGhlvEReNHwjt6lllZPD+eMcm67mLK0Sq1
8gsQ0fwo1+6M04FHoAzr7/nKj35nHwJ7BCKzeXnIFkaN13bjLshrMhBOYsf6u1YI
K2Nne2F+Hs1UjK86ESOsSGZWRo9qNMC0TUYr24b6OZIw6lHl3sv0pSOAN9V5tHE3
OqLiANXbpl+UbUSL3/exYq4ue+41+CRGvWMF/c9nUqfJjtejx9zXPu6UQWKiPy1u
uzT8R3gKKUl9Ng==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:53:30 2026 by rpki-client